Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216631 7.1 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-6317 2014-11-13 16:55 2014-11-11 Show GitHub Exploit DB Packet Storm
216632 5 警告 マイクロソフト - Microsoft Active Directory フェデレーションサービスにおけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-6331 2014-11-13 16:50 2014-11-11 Show GitHub Exploit DB Packet Storm
216633 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4077 2014-11-13 16:47 2014-11-11 Show GitHub Exploit DB Packet Storm
216634 5 警告 マイクロソフト - 複数の Microsoft Windows 製品のリモートデスクトッププロトコルの監査ログオン機能におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-6318 2014-11-13 15:49 2014-11-11 Show GitHub Exploit DB Packet Storm
216635 4.3 警告 マイクロソフト - Microsoft SharePoint Foundation 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4116 2014-11-13 14:29 2014-11-11 Show GitHub Exploit DB Packet Storm
216636 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-4149 2014-11-13 14:25 2014-11-11 Show GitHub Exploit DB Packet Storm
216637 4.3 警告 マイクロソフト - 複数の Microsoft Windows 製品 の Windows オーディオサービスにおける権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2014-6322 2014-11-13 14:19 2014-11-11 Show GitHub Exploit DB Packet Storm
216638 7.2 危険 マイクロソフト - Microsoft Windows Server 2003 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4076 2014-11-13 14:02 2014-11-11 Show GitHub Exploit DB Packet Storm
216639 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-6335 2014-11-13 13:49 2014-11-11 Show GitHub Exploit DB Packet Storm
216640 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-6334 2014-11-13 13:48 2014-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291461 - bmc service_desk_express Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) TABLE_WIDGET_1, (3) T… CWE-89
SQL Injection
CVE-2013-4945 2024-11-21 10:56 2013-07-30 Show GitHub Exploit DB Packet Storm
291462 - fusedpress buddypress-extended-frienship-request Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2013-4944 2024-11-21 10:56 2013-07-30 Show GitHub Exploit DB Packet Storm
291463 - freebsd freebsd The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4851 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291464 - isc
suse
novell
opensuse
freebsd
mandriva
redhat
fedoraproject
hp
slackware
bind
suse_linux_enterprise_software_development_kit
suse_linux
dnsco_bind
opensuse
freebsd
business_server
enterprise_server
enterprise_linux
fedora
hp-ux
slackware_l…
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remo… NVD-CWE-noinfo
CVE-2013-4854 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291465 - yahoo
moodle
yui
moodle
Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2… CWE-79
Cross-site Scripting
CVE-2013-4942 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291466 - yahoo
moodle
yui
moodle
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x … CWE-79
Cross-site Scripting
CVE-2013-4941 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291467 - yahoo
moodle
yui
moodle
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5… CWE-79
Cross-site Scripting
CVE-2013-4940 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291468 - yahoo
moodle
yui
moodle
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x befo… CWE-79
Cross-site Scripting
CVE-2013-4939 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291469 - moodle moodle The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly support the sendname, sen… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4938 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm
291470 - hp loadrunner Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736. NVD-CWE-noinfo
CVE-2013-4801 2024-11-21 10:56 2013-07-29 Show GitHub Exploit DB Packet Storm